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RECONF I CURABLE WELL LOGGING SYSTEM 

... . . M : -i . . - : - ■ : ri. rusl a av:; ^ > 7.; . 

5 Tbe p.re.sent j^vention^ : ze f lal^e,s., uf jtp .> ^.ii<ew. /.method and 

apparatus for providing., a recpnf igura|>le ..we 11- logging 
data acquisition and, interprefep^on systejn that , provides 
a.. lower-cost, higher rel i ability r>£3ta acquisition and 
i nt e r p re tat ion sy s t em than p r eyi ous^Ly. ■? a v ailablep whi 1 e 
10 retaining redundant response to component failure. 

Background . - 

Well-logging systems - today :. .^typically use sophisti- 
cated pn-rSite computer systems- for acquiring and 
15 interpreting we 11 -logging data from a downhole logging 
tool- Such systems are typically operated in harsh 
environments, far from suitable repair locations* System 
failures in a well-logging operation create expensive and 
unacceptable down- time. Thus, a high degree of system 
20 reliability is an essential attribute for such systems . 

Historically, a high degree of system reliability has 
been attained through total hardware redundancy with 
little or no use of the redundant hardware until a 
failure occurs. Failure recovery mechanisms for such 
25 redundant systems basically consist of two complete 
complements of the hardware - required to perform the 
particular function of the system. When the primary 
system fails, it is totally replaced by the back- r» 
system- Back-up or redundant systems, of course, 
30 significantly to the cost of the system. Second, 
well-logging systems must be transported to the well site 
=md are typically mounted in trucks or other transport 
..toans where adequate space is usually lacking. Back-up 
or redundant systems occupy valuable space which could be 
35 put to better use. 

One possible solution is simply providing a box of 
spare hardware components and parts /for the primary 
system based upon historical failure rate data for 
individual components required in the system. That could 
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possibly meet the availability requirement at lower cost 
figures for acquis^on^iitf space requirements, but the 
time required to diagnose whi^h^ component hla Called and 
■ ' ■ t'o physically remove! -it and' replace it'-W^oo'long . 

5 The present invention arose' f torn the realisation that 

■' . a sjiate tfffi/'tt* components might hot " be : -neces'sa'ry ; if the 
required processi*gi c6uld = be redistributed across the 
remaining Operational elements in the 'system iri t ! he event 
of a failure of one or more individual components . The 
10 inventors have determined that it is possible and 
practical to switch the failed element or element's out of 
the system and redistribute the processing task to 
complete the particular function the system was intended 
to Perform. That provides a lower-cost/ highly reliable 
15 and adaptable system. 

SUMMARY OF THE tmvrWtt^ 
The present system" can recover from the most probable 
hardware failures by using software and hardware switches 

20 to assume a new configuration and continue the mission of 
the system in a minimum amount of time. The present 
invention also allows for a range of performance and 
efficiencies as a result of the system's ability to 
readily change configuration. The present invention also 

25 permits a configuration to readily evolve along a price 
versus performance curve. The present invention also 
does not use the traditional total redundancy philosophy 
in order to achieve the reliability desired. 

The apparatus of the present invention provides a 

30 reconfigurable well-logging data acquisition and inter- 
pretation system for performing a variety of discrete 
data processing functions and which achieves a level of 
system reliability approximating that of a redundant 
system without total hardware redundancy. The apparatus 

35 of the present invention achieves that result by 
providing a plurality of hardware component groupings, 
each of which is configured and assigned responsibility 
for performing selected discrete processing functions. 
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Those hardware component . groupings are , interconnected 




5" are chosen such that if one or more components of a 
qfouiping taxi, the system may he reconf iaur6#- ,l?y: t trans- 
' f ertthg the .data p.^essing.^ r fj4ncti,Q.iv..; as^<g'^d t4V ^o the 
, u groupxng. Which is now failed, tp,. ano&her- * operable 

' grouping.. , t . . . , : - , v -*~* -is*'- 

10 The Wthod of the present inye^tj^n. .pjovi^es^ a 

process for producing such a we.ll- logging data acqui- 
sition and interpret at ion system having . , a . hicjh, f leye 1 of 
1 ^ys^em reliability. The method of the present,, invention 
achieves that result through identification. p% the 
15 d i s c r e t e d at a proces sing f unq t ions regui red by v the ent ire 
well-logging data acquisition $nd interpretation system; 
analyzing those discrete data . processing., functions to 
determine the minimal hardware requirements , necessary to 
perform each of those discrete functions; selecting a 
20 plurality of data processor hardware component , groupings 
such that each such grouping has at least one central 
jprocessor and such additional components as. required for 
those groupings to perform at least one of the discrete 
data processing functions; selectively assigning 
25 ^responsibility for performing the several, discrete data 
processing functions to those <Jata, processor hardware 
component groupings such that responsibility for 
performing the overall required sjystem da,ta processing 
functions are distributed over those , hardware component 
30 groupings without duplication; identifying the components 
used in those groupings which are most likely to fail; 
analyzing, for each component failure, which of the 
discrete data processing functions are disabled and 
which, if any, of the remaining hardware component 
35 groupings have the requisite components necessary to 
assume responsibility for performing the disabled data 
processing function; and, in the event the existing 
hardware component groupings do not have the components 
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30 



35 



■ - ^^l'^:- :.MC ^si^; selectively 

Hilur^lr rS - V " fr0,n . the coupon ^onent 

provzde a well-logging data< acquisition ^xrt "i„ter- 
pretation system that provides a. lower-cost, ' higher 
relxabllifcy data acquisition 5 and interpretation 'system 

lft ! ha " PreViOUSly 9Vailable thr °«^ use of totaV redundant 
10 hardware components. 

it is a further object o£ the present invention to 
prov.de a method for determining hardware configurations 
whxch can achieve the objective of providing a data 
acquisition and interpretation system having a relia- 
bility approximating that of a total hardware redundant 
system, but at a lower cost. 

^ It is yet a further object of the present invention 
to provide a well-logging data acquisition and 
interpretation system which permits ready and facile 
reconfiguration in the event of a component failure 

It xs yet a further object of the present invention 
to permxt a configuration to evolve in which signifi- 

wlth * n " e T a le ^ S ° f reliabilit * -n be obtained 

2T Z * Y " in " eaSeS ^ component redundancy 
25 and, therefore, cost. 

^ These and other objects, features and advantages of 
the xhvention will become evident in light of the 
followxno detailed description, viewed in conjunction 
wxth the referenced drawings of a preferred reconfigu- 
ration advxsor controller according to the invention. 
The foregoing and following description of the invention 
is for exemplary purposes only. The true spirit and 
scope of the invention is set forth in the appended 
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BRIEF PKRCPIPTTflM n f ^ DRAWTHfig 

Fig. 1 is a diagram showing an exemplary system 
according to the present invention. 
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Fig, 2 is the same diagram as, Fi.g. 1 with a failure 

* i si** 7 i : : . r '.- -.'i'iir:^& " -i \v-: : ■ •• ' ? : -j- •--.». - -» 

shown. . 

F i g , 3 is a diagram s how i ng . a mo re c omp let e exemp 1 a ry 

system according to the present invent ion. . .. - t 

> Figs. 4A, 4B, 4C and 4P together form, . a "failure 

" table" in accordance . wjlth the method, of the present 

invention. 



5P ;> pE^CTIgT3;p^ Of TH5 : IMVBWTXQM 
10 ; Referring to Fig . 1, system 10 is a schematic example 
of a we 1 1 - s i t e i ns t r ument , sy s t em f; p r, ^ logg^ ng s> % 1 wells. 
Data from a standard downtvple oil £pol . (not shown) are 
first inputted in conventional manner to an acquisition 
interface £4, in this case consisting of what is known as 
15 a tool power drawer ("TPD") 18 and a standard service 
drawer ("SSD") 20 which includes a switch .21. Switch 21 
may be either a conventional hardware or a software 
switch. 

The data from the dowrihple .tool are then fed along a 

20 parallel bus 22 to a plurality of data processor hardware 
component groupings, in this case to. a general processor 
("GP") grouping 12 and an acquisition processor ("ACQ") 
grouping 14. General processor unit 12, acquisition 
processor unit 14, and a third data, processing hardware 

25 component grouping called the he ;t processor ("HOST") 
grouping 16 are interconnected through a communications 
network 26. That network permits distributed processing 
by the three data processing hardware component 
groupings. As will become clearer in the description 

30 that . follows, each of those, processor groupings have 
assigned respon ibility for performing one or more of 
certain discrete data processing functions. Each of 
those discrete c^ta processing functions have certain 
minimal hardware requirements. It should be understood 

35 that each of the hardware component groupings 12, 14 and 
16 have a central processor unit and such data communi- 
cation, storage and interface components as are necessary 
to perform the discrete data processing function assigned 
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to particular groupings. #or example, as illustrated in 
the dr awing> general processor grouping 12 'and host 
processor groupie i 6 include such peripherals as disks 
and disk controllers, tapes and tape controllers. 
5 Further', the hardware components for groupings 12, 14 and 
16 are chosen such that th4' groupings can perform a type 
of inherent redundancy. In other words, the components 
for those hardware groupings are chosen such that there 
is at least one "back-up- grouping for each grouping 
which has sufficient hardware components not only to 
handle that grouping's assigned data processing tasks, 
but to take over the data processing functions or tasks 
of another grouping should that grouping fail for one 
reason or another; Acquisition processor grouping 14 and 
host processor grouping 16, in this example, share a 
memory 28 which permits high bandwidth data transfer 
between those two processors. In addition, acquisition 
processor grouping 14 includes a switch 38 used to switch 
between the communication networks 26. Switch 38 may be 
20 either a conventional hardware or software switch. 

General processor grouping 12 and host processor 
grouping 16 are connected through a switch 30, which may 
be either a conventional hardware or software switch, to 
a color graphics display ( "CGD") 32 and a back-up display 
(-VDT-) 34. Processor groupings 12, 16 and 14 are also 
connected via communications network 26 to redundant 
hard-copy output devices, such as conventional chart and 
similar types of recorders as illustrated at 36 
Switches 35 and 37 provide a means for switching those 
output devices in the event one of the processor 
groupings fails. 

^ in this particular example, the overall system must 
be able to accomplish several discrete data processing 
functions, namely acquisition data processing (ACQ) 
general data processing (i.e., data base management and 
the like), and graphics. 

Each of those data processing functions requires 
particular items or components of computer hardware. As 



25 



3 0 



35 



,, v _ 7 _ 

pointed put briefly above, responsibility, fpr- performing 
- ; those data .^rpq^sjsing functions jls, separately assigned to 
f ^ r:^ ~ " rJa nc eel oy^r") _tjtie .Rlur^lity pjE ( £ata_„ processor 
??"Pj n ^® ' ) ^ n ". x th;ls : ca8 ) e.. i processor; gx^up^ngj? 12^v V l 4 and 
5" 16. Those groupings in turn, ; intergpnnected: by 

* cotranuiiication ; t network _26 to...., provide, vd : istributed 
p E oc f?f ^9. „ T In. initially . .conf iguring., the , system, the 
configurations ?(?r each pf ,the three :; processpr; groupings 

■ 12, 14 and 16 are chosen such ithat those configurations 
10 will permit each, of those groupings^ to accomplish their 

assigned data processing task, and also tp^s^rve as a 
"back-up" such that most of th? : f ault conditions -can be 
covered. .... 

In this ; case, general processor grouping .12 has 
15 sv^ficient peripherals and components to accomplish all 
three functions, namely acquisition, graphics, and 
general processing. In a nonfailure case, however, 

■ general processor grouping 12 handles only the graphics 
function. 

20 The host processor grouping 16 . is configured to 

handle the general processing and graphics functions, 
although in a nonfailure case the host processor grouping 
16 only handles the general processing function. The 
acquisition processor 14 is configured to handle only the 

25 acquisition data processing function. Switches 21, 30, 
35 arid 37 provide a means to reconfigure the system in 
the event a component failure causes one of the processor 
groupings to fail. 

For example, referring to Fig. 2, it is assumed that 

30 both the host processor grouping 16 and the color 
graphics display 32 experience a failure. In that event, 
switch 30 is used to substitute the back-up video output 
terminal 34 for the failed co - graphics display 32. 
General processor grouping 12 it chen able to assume the 

35 responsibility for the general processing function 
previously performed by now failed /host processor 
grouping 16. 
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The method of the present invention win be explained 

t rates' .a WeU-si^e instrumentation system" for "logging 
Wells khowil ' as t*e Basic CSiOF system. The Configuration 
5 of that system results from the method , of the present 
invention. In this example,' the system consists of the 
same* three processor groupings shown' in simplified detail 
in Figs. 1 and 2. The first processor grouping around 
processor 40 is the general processor grouping used 
10 SpSci£id ^ lly to generate the graphics for a color 
graphics display terminal 42. Two disk storage units 44 
and 46 are connected through a disk controller 48 to a 
central processor 40. Additionally, a tape storage unit 
50 is connected through tape controller 52 to central 
15 Processor unit 40. Central processor unit 40 is also 
connected through a graphics display interface 54 and 
swxtch 56 to a color graphics display 42. 

Acquisition processor 58, in this example, is used 
for the data acquisition function and is connected 
20 through switch 60 in the standard service drawer and 
communication interface 62 to a data receiver unit (the 
tool power drawer) 64. As in the case of Figs. 1 and 2 
above, the standard service drawer receives the data from 
the downhole well-logging instrument (not shown). As is 
25 readily seen in the diagram, that data from the downhole 
xnstrument is fed through to acquisition processor 58. 

The third processor grouping includes a central 
processor 66 and certain peripherals and components 
xncluding a isk storage units 68 and 70 connected through 
30 disk controller 72 to central processor 66. a tape unit 
74 is also connected to central processor 66 through tape 
controller 76. Central processor 66 is also connected 
through a graphics interface 78 and switch 56 to color 
graphics display 42. Processor 66 and processor 58 share 
35 a memory 100. 

The three processors, 40, 58 and 66, and their 
related components forming the three processor groupings 
are connected to communication networks 80 and 82 through 
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standard cormminication interface devices 84,, 86, 88. 92 

.... <F^*s.. ^^^ h s^H? e ^i^ c W°s-#^^^m^ te in 

^ poncttng to ( , switch " ,-3B^in. Fio. a< pe*mi ts r ^ ^cquis i t ion 
5 ^P r | ce ^°^58 to : ^nnect x communi- 

. ^ ^^i^M^ 01 ^^ k h^Kv$*x&^*$& ,09^ i three 

^a^w ^i^J.^-M au A^F five 

discrete "Afaj^f, 05 d^a^J^c^ssj^ f unj^ipn^^hxch the 
.10 overall syister .must .perf o,n^ . in ; the, present example, 
iin ^^" e , |AO >c w£i 5^ Is.., . a 5 .^.owleaqfe ^M^oi.*3luding 
various rules , conjaitions and execu^^l^ pxpgrams r ^or the 
particular use§ .of t;his system;. HOST which jjjj- a. collec- 
tion of executable ^rbc c es ; se_s f ,for ; , exercising primary 

15 control of the system; GEN whicjt^ is gr^phics^ ^environment 
software for creating the necessary graphics output; HI 
which is windowing, mouse control and;, similar terminal 
^control software; and ACQ which is the data gathering or 
acquisition software, ^ose functions, of course-, will 

20 vary with the particular hardware and software being 
utilized for tlie basic system. . In this example, in order 
to exe .9 ufc e each of those discrete data processing 
functions or "images, " certain minimal hardware configu- 
rations are necessary . Again, . : although . different data 

25 processing functions will require different configu- 
rations, here the first processor grouping around 
processor 40 and the third processor grouping around 
processor 66 are configured such that both can .accom- 
modate the requirements of processing TAO, GEN, HOST and 

30 HI, although in actual practice (nonf ailure) , HOST and 
TAO will run on the grouping around processor 66 and GEN 
and HI wil run on the grouping around processor 40. The 
grouping abound processor 40 is also configured to run 
ACQ, although ACQ is normally run on processor 58. As 

35 illustrated in Figs. 4A through 4D, this ^configuration 
will permit a level of reliability approximating that of 
a totally redundant system without the increased cost and 
space problems caused by a totally redundant system. 
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s.. 4A tnrough 4D fcooof her 4 r i v*****4-« - 




v^i«iV#i^'«on#^^ I^ll^fl^ r component 

10 ^ mm^ m^^-r^m^o'W^m- thal'the two 
■ - fu^t^l*^ Ip^on^tV ate booting 

W> Snd' logg^g (W- nW^ions^ a^L" in 

th * * 6< * €h *' f * ilu * e table indicate the functions 

•:■ performed by the' various listed components , ' " : 

15 The first group of columns entitled "CG" are those 

components" relating color graphics, namely the 

"monitor- Which is the color graphics display 42 
"raster-tech" 43, and "COOTSWTCH" 56. The next column 
headed "VT 220" refers to "VDT" 98. - t: 

20 The seVeral columns heaoea "COM" refer to the 

neurits DELHI— x 80 and DELHI-y 82, and network 
interfaces DEQ-GS 84, DEQ-GP 86, DEQ-A 88, DEQ-HP 92, and 
DEQ-HS 94. switch 90, ENSW-A, is also included within 
the column or groupings tinder "COM." 
25 The column or groups under "GP« include those 

components within the processor grouping around- central 
processor 40, including graphics interface DRVIIWA-G 54 
central processor GP/MVII/MEM 40, tape unit TK50-G 50 ' 
tape controller T0K50-G 52, disk storage unit DISK-GO 4 4 ' 
30 disk storage unit DISK-G1 46, and disk controller RQDX3-G 
48. The next column headed "ACQ" includes acquisition 
processor 58. 

The next grouping of columns under "HOST" include 
those components within the grouping around central 
35 processor 66, namely graphics interface device DRVIIWA-H 
78, central processor HOST/MVII/MEM 66, tape unit TK50-H 
74, tape controller unit TQK50-H 76, disk storage unit 



' . - 11 - 

* .--si. 

R($DX3-H 72, and^sha^ - v a^H>;>. 

The next "cplunins under, the sheading /.rssof-v^r standard 

" ^ S ^3py' s*t?7&«$ >f ^M 1 ^^?^ 11 -v£- 0 j #^W? ) 6 and tegundant 
5 ^interface pi&yiceg INTFJ and .£^F2..in standard-service 
•drawer - 62. ...... - .,- v . - , - . vrM . 

Tfe next. qolim ri OT hea£ing r , m T*J§,~. of f course^, ^jsfer to 

R^f erring^ to t^e ; ^i§t;3 of: "failures^ o?i. fehe--le£ : t ' side . 

10 of the "failure ...t^ril^r shown ,in Bvicf^. 4A v through 4D, 
row 1 illustrates the booting and logging^ functions per- 
formed by ..the various components with everything working. 
Row 2 illustrates w* t occurs if : the host disfe DISK-HO 
68 and pisk-"l 70 fa 1. As noted in the "failure-table/" 

15 the failed dx?k storage is replaced s by activating switch 
56 ("CONTSWTCH-) which now permits use of the disk 
stor*. e and controlle- components associated with general 
^processor 40, namely DISK-GO 44, DISK-G1 46, and; KQDX3-G 
48, respectively. 

20 Referring to row. 3, if host processor 66 fails, that 

disables component grouping around processor 66. 

However, a. illustrated in the ^failure table," those 
functions can now be replaced by the component grouping 
around processor 40. . : 

25 Referring to row 4, if disk storage units DISK-GO 44 

and DISK-G1 46 with disk controller RQDX3-G 48 fail, 
those functions can be replaced by . the corresponding disk, 
storage and disk contrpller ^component of the grouping 
around processor 66, namely disk storage units 68 ^nd 70, 

30 and disk controller 72. 

Referring to row 5, if processor 40 fails, that 
disables the component grouping around . that processor; 
however, activating switch 56 now permits the component 
grouping around processor 66 to assume the functions of 

35 the failed equipment. ^ 

Referring to row 6, if acquisition processor 58 
fails, activating switch 56 and switch 60 permits the 
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15 



20 



25 




30 



35 



HOWe T er ' a «=«vating switch faft ho^rYSi^ ^ factions 
PreVlOUS1 ^ ^™ed by ac^uisi^on^ p^cessor' 58 to be 
assumed by th e comport gfbuplhg" WroUnd processor' 40 
(see tow' 6) . •. ■■ y >.~.-. y.t :y-i : • : * u 

; referring to- row 9 ; if interface DEQ-hp 92 fails 

%' ctivat6a aha funct ^ a :^ 

fails that disables DfiQ-GS 84 and DEQl H P 92. However. 

DELHI rTr 0 " " 6 rePl3Ced ^ DEQ " GP ^-HS 94, and 

f!il s / K In 11 ' lf the 9 «phic S interface 54 

faxls swxtch 56 may be activated and serve to replace 
that functxon with interface 78. In . row 12 , in the eve" 
tape and/or tape controller 74 or 76 fail, those func- 
tions may be replaced by tape unit 50 and tape controller 

III h Shared memory 100 fails, row 13, that function 

may be replaced through interface DEQ-A 88, EKSW-A 0 

£< °-» 92 . In row 14 , if switch 60 fails, Tecov ; 
thr ; U9 , h a -P^cement spare switch. Referring to row 

15, zf fxrst interface INTFl fails, that funct:ion is 

replaced by backup interface INTF2. 

Rows 16 arid 17 refer to power supplies, not shown 

and sxmply point out that if one power supply f ail Tit 

xs replaced by the other. 

Row 18 illustrates that if „ 1 

fails 4* 4. ° l0r 9 ra P hi « system 

fa.ls, it x. replaced by VDT98 upon activating switch 96 

permit " n ^ " eSn ' SyStem ° f the Present invention 

tnrolh r COV r y fr ° m m ° St tyPiCal COmP ° nent 

through reconfxguring the system from the .first configu- 

atxon to a second conf iguration by transferring ^ fl , 
funct ons performed by one of the processor component 
9ro UP xngs to another. Thus , . reliabiUty ™\ 
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approximating that of a total hardware redundant system 
is possible, without- incurring the costs , and , other 

■ ■ w . '"■ ■ *%\X*\>i 

problems exhibited by such totally redundarit Systems . 

The method of the present indention is applicable to 
5 A variety of distributed processing environments . As 
pointed out above/ the overall data processing functions 
which must be performed by, a particular system will vary 

W ^ h .' p " t ^^5 r ..^PPA^tto^' fu f ft^cm^ce <f( - each of 

such discrete data processing , functions will require 

10 varying hardware configurations.^ , w. 

Therefore, the method, of ; . tbe^ present invention begins 
with identifying the discrete dfita processing^ functions 
the entire ^eil-iogging da£a ; acquisition^ and interpre- 
tation system must perform. In the present example, of 

15 course, those functions are T AO , HOST, GEN, HJ ..ajid ACQ. 
That step must include identifying any pa^rticu la rules, 
assumptions and constraint^ imposed by the data 
processing requirements of the system.. Those rules, 
assumptions and constraints will., .of. ^course.:, vary 

20 depending upon the particular hardware used, the types of 
software used, and the intended functions of the system. 

The second step of the method is to analyze those 
discrete data processing functions to determine the 
minimal hardware requirements necessary, to perform each 

25 of those discrete func ions. The. third step of the 
method of the present invention is to select . a plurality 
of data processor hardware component groupings, such as 
those groupings around processors 40, , 58 and 66. Each of 
such hardware groupings should have, as one component, at 

30 least one central processor and,, as additional compo- 
nents, the minimal hardware peripherals, such interface 
units, tape drives and controllers, disk drives and 
controllers, shared memory elements, booting equipment 
and so forth required for such groupings to perform at 

35 least one of the discrete data processing functions 
required. All of the data processor hardware groupings, 
of course, collectively, but not individually, should 
have all of the minimal hardware components necessary to 
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perfoirm ill of the discrete data processing functions of 
the system. ; " . , v. ^ 



w , . ;f o , £ ° urth - s *= e P to selectively, assign responsi- 

blll , t f . fo 5 perfo ™ in ? f the discrete, data processing 
5 functions to the data processor hardware . component 
groupings such that the responsibilities for performing 
the overall system data processing functions are 
distributed airndng the data processor hardware component 
groupings withdut duplication. At this stage, of course, 
the configuration would consist of the' minimal hardware, 
ar tangled in component groupings which would be necessary 
to perform the required data processing: There may or 
may not be, however, any built-in redundancy in the event 
of component failure. In order to ascertain what 
15 redundancy does exist, what redundancy must be added, and 
how the system should be reconfigured in the event of a 
component failure, the fifth step of the method of the 
present invention requires an identification, from 
historical hardware component reliability data, of the 
20 components used in the hardware component groupings which 
are most likely to fail. That step would thus proceed 
with generation of a -failure table" such as that shown 
in Figs. 4A through 4D. 

The sixth step of the method of the present invention 
25 requires an- analysis, for each component failure, to 
determine which of the discrete data processing functions 
are disabled by component failure, and which of the 
remaining hardware component groupings, if any, have the 
requisite components necessary for assuming responsi- 
30 bility for performing the disabled data processing 
function, in the event the existing hardware component 
groupings do not have the components necessary to assume 
responsibility for performing the disabled data 
processing functions, the seventh step of the method of 
35 the present invention requires selectively adding 
hardware components to the hardware component groupings 
untxl at least one other hardware component grouping 
contains the hardware components necessary to perform the 



* , - 15 - ' '" ' 

data processing funcfeign disabled by a particular compo- 
nent failure. That process continues until che resultant 
data processing hardware groupings, confca in: th$ components 
necessary to permit recovery from system component 
5 f **? ures h ? ? e - e ?^ V€ 4? tra fls fe fFi n 9 Responsibility ^for 
Performing thG a : S :^S n ^ ?ata p ropes sing : functions from 
the data, processor, haxdware, component grpupings 
cd *M in A- g , one ? r . f ailed components to ,a data 

processor hardware component, grouping haying the 

10 components necessary to perform the transferred 
processing function. 

The result of the process of the present invention is 
to achieve an pverall hardware configuration, which 
utilizes minimal component redundancy to achieve a 

15 reliability level approximating that of a totally 
hardware-redundant system by effectively utilizing the 
inherent redundancy of a dis ibuted processing system 
and the ability to reconfigure the system and transfer 
data processing functions as necessary to recover from 

20 component failure. 

Although the invention has been described in 
conjunction with the foregoing specific embodiment, many 
alternatives, variations and modifications will be 
apparent to those of ordinary skill in the art. Those 

25 alternatives, variations and modifications are intended 
to fall within the spirit and scope of the appended 
claims . 



30 
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What is claimed is j Ci 1 * y ' f .'. : : 

1 ■ J A reco'Sfigutable well-losing data acquisition 
system for P et*orming a plurality 6f " discrete data 
processing functions 4 which achieves a level of system 
reliability approximating that of a redundant system, but 
without tbtal hardware tedunaancy, having 1 means for 
inputting well-logging data into the system; a 'plurality 
of central processor units and associated peripheral 
units which are grouped into component groupings for 
performing each bf said discrete data processing 
functions with each component grouping containing at 
15 least one central processing unit; a separate software 
module for performing each of said discrete data 
processing functions when said module is booted onto a 
central processing unit; and a communications network 
operatively connecting each of said central processing 
units to one another characterized by: 

means for booting said software modules onto any 
of said central processing units; 

means for switchably connecting said peripheral 
units to alternate central processing units; 

wherein a central processing unit or peripheral 
unit may be a member of more than one group; 

wherein each peripheral unit includes two or more 
video display terminals; and 

wherein said component groupings are initially 
configured for performing a plurality of data 
processing functions and further wherein each 
component grouping may be reconfigured in the event 
one or more components become inoperable by booting 
another software module onto the central processing 
unit of a particular grouping or switching one of 
said peripheral units to another of said central 
processing units. 



20 
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2. The system as set forth in claim characterized 
in that said plurality of peripheral units compr^es: 

a ^ color "graphics displciy tf rmina| nil s^itchably 
connected to a plurality of said central processing 
5 units through separate graphics interfaces; - 

a back-up video display, terminal; _ 
means for switchably and operably connecting all 
of said central processing unit;s to said central 
~ prdcessing units to back-up video display terminal; 
10 arid 

wherein said back-up. v." ieo display , connecting 
means also switchably and operably connects all of 
said plurality of central processing uni^s t? said 
color graphics display terminal which can thereby be 
15 driven in the same manner as said back-up video 

display terminal in the event one or more of the 
graphics interfaces fail. 

3. The system as set forth in claim 1, characterized 
20 °y a memory shared between two of said central processing 

units which permits high bandwidth data transfer between 
said processors when said communications network fails. 

4. The system as set forth in claim 1, characterized 
25 in that at least one of said peripheral units includes a 

hard-copy output device* 

5. The system as set forth in claim 1, characterized 
in that at least one of said central processing units 

30 includes a data storage mechanism. 

6. A method for reconfiguring a well-logging data 
acquisition and interpretation system in the event of 
system failure, the system including at least an 

35 acquisition processor grouping operable for receiving and 
processing data from a downhole logging instrument and a 
general processor grouping operable to control the 
graphics display on a video terminal, characterized in 
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' '^tV ; ih the evbnt ; *of "iailu^ 5 of "the acquisition 

, lb99in9 ". ( inStrUmd,it/ , «-PO«*i&lity. fox receiving and 
Pressing dat^ from tne logging . instrument is trans- 
5 ferred from fcjfr ^guisit^on ^sspr' grouping to the 
general processor grouping. ' 

; 7- The method of claim 6 wherein, ln normal 
operation, the acquisition processor grouping includes a 
processor running a data acquisition software module and 
the general, processor grouping includes a processor 
running graphics environment and terminal control 
software, characterized in that, in the event of failure 
of the acquisition processor grouping, the processor in 
the general processor grouping runs the data acquisition 
software module. 



10 



15 



8. The method of claim 6, including a third 
processor grouping which includes a processor in normal 
20 operation running primary system control software 
characterized in that, in the event of failure of the 
thard processor grouping, the processor in the general 
processor grouping runs the primary system central 
software. 
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